WordPress Plugin Vulnerabilities

WP Forum < 2.4 - Multiple SQL Injection

Description

The wp-forum WordPress plugin was affected by a Multiple SQL Injection security vulnerability.

Affects Plugins

Plugin icon
wp-forum
Fixed in 2.4

References

CVE
CVE-2009-3703
URL
https://www.securityfocus.com/archive/1/508504/100/0/threaded

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
aa5d0abb-7239-4a9b-b684-9b1ece51ccf9

Timeline

Publicly Published
2009-09-28 (about 16 years ago)
Added
2019-08-26 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2023-12-28
Title
WP Adminify < 3.1.7 - Authenticated(Administrator+) SQL Injection
Published
2023-07-10
Title
RSVPMarker < 10.5.5 - Admin+ SQL Injection (SQLi)
Published
2014-08-01
Title
store-locator-le - SQL Injection
Published
2025-05-05
Title
Slider & Popup Builder by Depicter < 3.6.2 - Unauthenticated SQLi via 's' Parameter
Published
2025-02-11
Title
Small Package Quotes – UPS Edition < 4.5.17 - Unauthenticated SQL Injection